[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Bug#766395: emacs/gnus: Uses s_client to for SSL.

From: Perry E. Metzger
Subject: Re: Bug#766395: emacs/gnus: Uses s_client to for SSL.
Date: Mon, 27 Oct 2014 15:39:54 -0400

On Tue, 28 Oct 2014 02:17:00 +0900 "Stephen J. Turnbull"
<address@hidden> wrote:
> Perry E. Metzger writes:
>  > There are ways to provide compatibility without sacrificing
>  > security, however. Read our papers or our (redacted)
>  > recommendations to law enforcement if you wish.
> How many of those law enforcement agencies immediately acted on your
> recommendations?

Several acted quite quickly. I'm not at liberty to discuss the
details for obvious reasons. That said, we had contacts with a large
number of agencies, and they were very interested in our advice.

>  > I think that removing SSL 3.0 support is not an "extreme
>  > measure" and leaving it in isn't "balanced" at this point.
> While my credentials in security aren't anywhere near as good as
> yours, unfortunately, you are obviously an extremist

Whatever. You can keep calling me names all you like -- but it
doesn't make your opinion any more correct. Indeed, no matter what
names you call people, it won't increase the evidence for your

Perry E. Metzger                address@hidden

reply via email to

[Prev in Thread] Current Thread [Next in Thread]